Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have read through the document found at,

NSA RHEL5 Security Requirements

In reading through the document, it seems that you can use any version of RHEL 5 as long as it supports the requirements in the document. Is there any other document out there that says that RHEL 5.3 is the only supported version of RHEL 5 by the NSA? If so links to the document would be greatly appreciated.

share|improve this question
You mean if it's passing all security clearances, then yes RHEL5 is the only government approved version, RHEL 6 might still not have all of them as required by U.S. government, however it can be used in business no problem, as it's kernel it's pretty much stable as it seems. – Andrew Smith Jul 24 '12 at 20:15
And this is pretty much generic guide how to setup linux in a way it's not completely naive. – Andrew Smith Jul 24 '12 at 20:22

This page at RedHat's site seem to have the most current information available on public sites and suggests a RHEL6 standard may be available in November 2012:

As far as I can tell from the STIG itself at the linked site, the version of RH5 is not relevant to the requirement:

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.